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AMENDMENTS TO THE CLAIMS 

1. (Currently Amended) An information management apparatus for processing data 
containing personal data comprising: 

personal data extraction means for extracting personal data from processing-object data; 

unique code generation means for performing an operation using one-way function on the 
basis of personal data extracted by said personal data extraction means, to generate a unique 
cod e, wherein the unique code includes encoded privacy information data ; and 

primary conversion data generation means for replacing personal data of said processing- 
object data with said unique code, to generate primary conversion dat a, wherein said generated 
primary conversion data includes both the processing-object data and the unique code . 

2. (Currently Amended) An information management apparatus as recited in claim 1 , which 
further comprises storage means for storing said primary conversion data^ aad -including said 
processing-object data on which said primary conversion data are based in a state in which these 
data are correlated with each other. 

3. (Original) An information management apparatus as recited in claim 1, wherein said 
unique code generation means comprises a reference character string generation means for 
generating a reference character string from personal data extracted by said personal data 
extraction means, and operation means for operating a predetermined processing-object character 
string by means of said one-way function using said reference character string as a key, to 
generate said unique code. 
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4. (Original) An information management apparatus as recited in claim 3, wherein said 
operation means comprises digit number determination means for determining an operation digit 
number on the basis of said reference character string, processing-object character string 
generation means for generating an processing-object character string having said operation digit 
number and operation execution means for operating said processing-object character string by 
means of said one-way function using said reference character string as a key. 

5. (Original) An information management apparatus as recited in claim 1, which further 
comprises a secondary conversion data generation means for encrypting said primary conversion 
data to generate secondary conversion data, output means for outputting said secondary 
conversion data to other apparatus, and storage means for storing said outputted secondary 
conversion data, said primary conversion data on which said secondary conversion data are 
based, said processing-object data on which said primary conversion data are based and records 
of output from said output means in a state in which these data and records are correlated with 
one another when said secondary conversion data are outputted from said output means. 

6. (Currently Amended) An information management system which comprises an 
information management apparatus for processing data containing personal data and an 
information center apparatus for managing data processed with said information management 
apparatus, the information management apparatus and the information center apparatus being 
connected to each other through a communication line; said information management apparatus 
comprising: 

personal data exfraction means for exfracting personal data from processing-object data; 

unique code generation means for performing an operation using one-way fimction on the 
basis of personal data extracted by said personal data extraction means to generate a unique code^ 
wherein the unique code includes encoded privacy infomiation data ; 

primary conversion data generation means for replacing the personal data of said 
processing-object data with said unique code to generate primary conversion dat a, wherein said 
generated primaiT conversion data includes both the processing-object data and the unique code ; 
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secondary conversion data generation means for encrypting said primary conversion data 
to generate secondary conversion data; 

output means for outputting said secondary conversion data to said information 
management apparatus through said communication line; and 

storage means for storing, when said secondary conversion data are outputted Irom said 
output means, said outputted secondary conversion data, said primary conversion data as an 
original of said secondary conversion data, said processing-object data as an original of said 
primary conversion data and records of the output made by said output means, in a state in which 
they are correlated with one another; 

said information center apparatus comprising: 

receiving means for receiving secondary conversion data transmitted from said 
information management apparatus; and 

decryption means for decrypting secondary conversion data received by said receiving 
means to generate said primary conversion data. 

7. (Original) Ah information management system as recited in claim 6, wherein said 
information center apparatus further comprises data storage means for storing primary 
conversion data generated by said decryption means and processes data stored in said data 
storage means by means of said unique code as a key. 

8. (Currently Amended) An information management system as recited in claim 7, wherein 
said information center apparatus detects data containing the same identical u nique code from a 
plurality of data containing said unique codes stored in said data storage means. 

9. (Currentiy Amended) A computer readable storage medium having stored thereon 
computer executable program for causing an information management computer for processing 
data containing personal data, the computer program when executed causes a processor to 
execute steps of: A program for causing an infomiation manag e m e nt computer for proc e ssing 
data containing p e rsonal data to e xecut e processing comprising th e st e ps of: 
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extracting personal data from processing-object data by means of personal data extraction 

means, 

performing an operation using a one-way function on the basis of the personal data 
extracted by said personal data extraction means by means of unique code generation means to 
generate a unique cod e, wherein the unique code includes encoded privacy information data , and 

replacing personal data of said processing-object data with said unique code by means of 
primary conversion data generation means to generate primary conversion dat a, wherein said 
generated primary conversion data includes both the processing-object data and the unique code . 

10. (Currently Amended) The program c omputer readable storage medium of claim 9, which 
is for causing said information management computer to execute the processing which further 
comprises the step of storing said primary conversion data^ an d including said processing-object 
data as an origin of said primary conversion data in storage means in a state in which they are 
correlated with each other. 

11. (Currently Amended) The progra m computer readable storage medium of claim 9, 
wherein the step of generating the unique code by said unique code generation means comprises 
the steps of: 

generating a reference character string from personal data, which are extracted by said 
personal data extraction means, by means of a reference character string generation means; and 

operating a predetermined operation-object character string by means of said one-way 
function using said reference character string as a key to generate said unique code. 

12. (Currently Amended) The program computer readable storage medium of claim 11, 
wherein the step of generating said unique code with said operation means comprises the steps 
of: 

determining an operation digit number on the basis of said reference character string by 
means of digit nxraiber determination means; 

generating an operation-object character string having said operation digit number by 
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means of operation-object character string generation means; and 

operating said operation-object character string by means of said one-way function by 
operation execution means using said reference character string as a key. 

13. (Currently Amended) The program computer readable storage medium of claim 9, which 
is for causing said information management computer to execute the processing which further 
comprises the steps of: 

encrypting said primary conversion data by means of secondary conversion data 
generation means to generate secondary conversion data; 

outputting said secondary conversion data to other apparatus by output means; and 
causing storage means, when said secondary conversion data are outputted from said 
output means, to store said outputted secondary conversion data, said primary conversion data as 
an origin of said secondary conversion data, said processing-object data as an origin of said 
primary conversion data and records of the output from said output means, in a state in which 
they are correlated with one another. 
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